Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
File: 0NDWzWh3DDh4O764QbES0FYBdKI.cer (raw, json)
Hash identifier: FtCCt/V3cK462pDpaQPr3DVo35OBbdHtU7wiKkacRj0=
Subject key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 029A48
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:47:53 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 103.125.144.0/22
IP: 2403:f5c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170568 (0x29a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 27 03:47:53 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:bc:c3:63:48:f7:02:1c:83:b8:d6:2c:93:
bc:5a:fb:91:d3:49:1b:35:1a:a6:a5:40:0c:e4:68:
ab:e6:6c:fb:d9:1a:dd:38:58:03:ae:f8:7d:26:2d:
b0:87:0b:29:dc:55:ec:39:82:20:ea:da:4d:a0:b6:
ef:de:f3:e7:59:09:e2:a7:68:71:86:75:96:c3:4a:
87:97:04:63:6b:a3:77:fd:5f:59:c0:91:76:5f:b0:
91:36:7d:fc:64:6a:98:f8:b4:41:6e:b0:fa:bd:67:
0f:2a:06:5e:7c:72:4b:8d:b8:f1:47:14:73:58:0c:
01:73:3f:9b:42:53:f9:4c:e3:c1:01:4b:92:83:97:
7d:b8:9d:35:a2:cc:60:35:8e:d4:60:53:9e:5b:b5:
29:25:d6:93:4f:f0:7d:0d:ec:11:1e:a8:30:23:fb:
27:69:1a:e5:f2:3a:56:d1:a6:f1:4e:32:60:1f:57:
54:b9:2d:f6:93:6a:09:88:c5:32:96:9e:22:83:52:
1c:0d:af:43:ce:52:65:20:9a:8e:18:3c:d2:e2:b1:
7c:a1:69:f5:93:2b:20:48:eb:c4:26:b4:66:12:11:
7a:a6:e8:bf:12:81:5c:c3:0d:56:df:f3:2b:a6:55:
60:ac:f4:f0:70:79:56:89:7b:93:d2:91:20:eb:78:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.144.0/22
IPv6:
2403:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
53:84:55:16:03:fb:ed:be:18:35:7e:65:8f:eb:19:57:f3:9f:
ec:19:ac:5a:10:44:e5:d8:37:96:1b:ae:4f:b5:6b:58:9e:a9:
60:62:fd:b9:2b:2c:18:ce:da:6f:8d:d0:dd:69:1b:69:90:91:
17:fd:48:09:5e:59:32:29:16:eb:83:db:c9:e3:5a:0f:da:d0:
29:24:5d:88:3d:dc:22:43:70:68:d1:f6:9b:46:85:57:7e:2f:
91:9e:06:8b:ad:6f:cc:d5:30:61:51:07:78:b1:74:1a:99:aa:
5c:51:62:9d:15:d7:2f:7d:9c:d6:14:0b:2d:7c:be:20:c4:84:
38:00:df:4a:18:6b:6e:0a:94:f0:e4:df:ea:2c:7b:9d:9d:1f:
1b:10:9e:b5:30:1d:16:8d:c7:ba:44:9f:66:0e:f9:d3:92:67:
5f:11:3c:31:eb:e9:a0:c8:65:4a:71:cf:f8:c5:6a:46:99:b6:
63:41:a2:c3:f9:43:af:f7:1c:e4:e9:1d:71:83:50:43:26:0b:
63:d5:02:88:8e:18:0b:2c:48:f7:40:c8:93:4a:bd:f1:a3:e2:
ef:33:8d:09:c7:4b:f5:6d:7e:83:03:0b:6f:1d:fd:4d:65:af:
28:71:d7:36:a9:12:16:61:23:98:76:60:ba:05:0d:4c:0c:b0:
ea:0d:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:50:08 2026 by rpki-client